Crunchyroll Investigates Claimed Breach of 8M User Records

Crunchyroll, the popular anime streaming service owned by Sony, is investigating claims by a threat actor who says they breached the company's systems on March 12, 2026, stealing personal information from millions of users through a compromised employee at outsourcing partner Telus International.

The hacker contacted cybersecurity researchers last week, asserting they infected a Telus support agent's computer with malware, which allowed them to steal credentials for the agent's Okta single sign-on account. This access reportedly granted entry to multiple Crunchyroll tools, including the Zendesk support ticketing system, Google Workspace email, Slack, and analytics platforms like Mixpanel. Using these privileges, the attacker downloaded about 8 million support ticket records, containing data on roughly 6.8 million unique email addresses. The stolen information includes users' names, login details, email addresses, IP addresses, general locations, and the contents of support interactions. Partial credit card details, such as the last four digits or expiration dates, appeared in some tickets where customers had shared them voluntarily, though full card numbers were rare.